$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.mft File: 9C7E4020A3FE6A17C349B27BF2790BF977A2E619.mft (raw, json) Hash identifier: JtTXsflkg6kGcwOM/xhMuikCYMYiCTs/2YbUyOGmQRg= Subject key identifier: 9B:14:12:B0:0C:FE:83:54:46:19:30:9E:F3:65:82:76:3C:30:03:82 Authority key identifier: 9C:7E:40:20:A3:FE:6A:17:C3:49:B2:7B:F2:79:0B:F9:77:A2:E6:19 Certificate issuer: /CN=9C7E4020A3FE6A17C349B27BF2790BF977A2E619 Certificate serial: 0CAC15C39516A6F8FFBB2E0FDE0E30C5AE2D4172 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.cer Subject info access: rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.mft Manifest number: 33 Signing time: Mon 07 Apr 2025 13:49:02 +0000 Manifest this update: Mon 07 Apr 2025 13:44:02 +0000 Manifest next update: Tue 08 Apr 2025 16:47:02 +0000 Files and hashes: 1: 3133312e3235352e35322e302f32322d3234203d3e20323632363735.roa (hash: /S/aZrizx/Lfkhwu3IYOLdn++jotFaUpbUFQ5/AZLUo=) 2: 9C7E4020A3FE6A17C349B27BF2790BF977A2E619.crl (hash: OdWci4ilDF11v7mbdqE4mkC+7AcAgSaF3oJxmIYyTgA=) 3: 323830343a6134343a3a2f33322d3333203d3e20323632363735.roa (hash: NPHwC95tALb5DStY+0sk7WlWQJG7RwZO1MTsO+2oetE=) 4: 3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa (hash: mINQcu3+a18r29P2stfpXBkhmbKAwWWSTw/Prna/efg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.crl rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 16:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ac:15:c3:95:16:a6:f8:ff:bb:2e:0f:de:0e:30:c5:ae:2d:41:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C7E4020A3FE6A17C349B27BF2790BF977A2E619 Validity Not Before: Apr 7 13:44:02 2025 GMT Not After : Apr 8 16:47:02 2025 GMT Subject: CN=9B1412B00CFE83544619309EF36582763C300382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:34:d3:88:82:da:e6:d7:15:4f:d7:a0:be:65: 7a:44:fc:d6:50:15:b8:21:09:37:85:5c:b1:78:03: 1b:0c:ec:ca:3e:d9:e1:46:06:27:0b:c7:e4:1f:a5: 8f:4d:43:39:d5:95:b6:c7:2f:87:5b:45:ce:34:8e: 48:7f:c0:30:38:99:3d:04:87:3e:0a:78:57:ac:c1: 2f:37:8d:be:ee:16:e1:e8:b0:a5:d1:08:17:01:03: 97:69:e3:cd:62:2a:aa:35:92:30:0b:83:4b:54:30: 1b:c1:a8:a8:5e:a7:42:06:b4:78:27:03:33:0a:d9: 99:db:6e:7c:63:e5:62:84:ba:b4:90:1a:2c:a3:be: 98:3b:0e:f3:57:10:6b:ac:f5:63:36:07:f7:66:5a: 98:84:87:a2:0c:58:a0:f8:6c:56:fa:ab:c6:a3:76: a5:d4:98:6a:24:f2:86:0d:41:90:1e:f7:e5:bd:6d: e0:47:54:0d:a3:ef:00:eb:33:3a:65:ca:b0:e4:f1: bc:79:6c:b3:cf:7a:e7:ea:a8:7a:3e:cd:4d:33:d4: fa:83:33:06:b8:89:c5:a7:5c:7d:64:c1:7f:a1:f1: 4e:a3:3e:87:af:a1:a4:a9:b8:11:c2:48:dc:99:c3: 62:e6:39:cf:81:86:40:ea:1d:13:f6:4b:ce:f4:49: 5a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:14:12:B0:0C:FE:83:54:46:19:30:9E:F3:65:82:76:3C:30:03:82 X509v3 Authority Key Identifier: keyid:9C:7E:40:20:A3:FE:6A:17:C3:49:B2:7B:F2:79:0B:F9:77:A2:E6:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:92:b8:ab:c9:19:c8:18:35:25:c1:42:4a:43:b4:93:88:79: 9e:4d:82:3d:9f:b5:15:bf:41:a5:17:dc:3b:3f:2c:cf:6d:36: ff:33:f6:84:f1:04:e9:2f:83:5d:59:08:1c:cd:2f:3a:21:6d: 00:cd:51:b4:3b:c4:db:66:12:23:d0:f3:7d:ae:cd:06:71:e5: 40:e5:d1:d5:ff:da:6d:d9:47:c8:d3:f1:66:f4:d4:8d:21:d8: 4e:96:33:d9:0e:01:74:21:56:7d:9e:e6:6c:80:26:80:39:1a: 33:31:e1:d6:d5:32:6c:79:16:4a:67:9b:25:d4:5c:6a:37:3c: 4f:ff:ac:ea:f6:b0:26:6c:42:03:d8:e0:e9:88:06:f6:80:9b: 5e:10:0c:cc:b7:5d:4a:0a:2e:82:a9:e9:74:69:7b:29:c0:74: 31:a8:e3:6b:68:0e:28:9b:8a:7c:f4:b7:2b:02:c3:9f:72:08: 61:69:ef:cf:68:c7:ab:84:20:5c:7b:9f:dc:ca:bb:13:3e:2c: a8:8d:c9:7c:ac:09:64:17:df:12:99:6d:8f:5f:71:02:35:31: 1d:0a:2d:cc:8f:1f:e6:e9:95:52:cb:69:f1:be:10:01:5c:e3: 16:b9:10:e2:af:a3:bf:64:0f:3b:38:4c:76:8d:b4:8d:33:87: e0:ce:96:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDKwVw5UWpvj/uy4P3g4wxa4tQXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM3RTQwMjBBM0ZFNkExN0MzNDlCMjdCRjI3OTBCRjk3 N0EyRTYxOTAeFw0yNTA0MDcxMzQ0MDJaFw0yNTA0MDgxNjQ3MDJaMDMxMTAvBgNV BAMTKDlCMTQxMkIwMENGRTgzNTQ0NjE5MzA5RUYzNjU4Mjc2M0MzMDAzODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVNNOIgtrm1xVP16C+ZXpE/NZQ FbghCTeFXLF4AxsM7Mo+2eFGBicLx+QfpY9NQznVlbbHL4dbRc40jkh/wDA4mT0E hz4KeFeswS83jb7uFuHosKXRCBcBA5dp481iKqo1kjALg0tUMBvBqKhep0IGtHgn AzMK2Znbbnxj5WKEurSQGiyjvpg7DvNXEGus9WM2B/dmWpiEh6IMWKD4bFb6q8aj dqXUmGok8oYNQZAe9+W9beBHVA2j7wDrMzplyrDk8bx5bLPPeufqqHo+zU0z1PqD Mwa4icWnXH1kwX+h8U6jPoevoaSpuBHCSNyZw2LmOc+BhkDqHRP2S870SVphAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmxQSsAz+g1RGGTCe82WCdjwwA4IwHwYDVR0j BBgwFoAUnH5AIKP+ahfDSbJ78nkL+Xei5hkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzVMa2R0OVNkTEVaOXY1c1VFWnp2a0dNd1JUNHhCOW5NVkxmZ2lyakdr dzIvMC85QzdFNDAyMEEzRkU2QTE3QzM0OUIyN0JGMjc5MEJGOTc3QTJFNjE5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDN0U0MDIwQTNGRTZBMTdD MzQ5QjI3QkYyNzkwQkY5NzdBMkU2MTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzVMa2R0OVNkTEVaOXY1c1VFWnp2a0dNd1JUNHhCOW5NVkxmZ2lyakdrdzIvMC85 QzdFNDAyMEEzRkU2QTE3QzM0OUIyN0JGMjc5MEJGOTc3QTJFNjE5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJpK4q8kZyBg1JcFCSkO0k4h5nk2CPZ+1Fb9BpRfcOz8sz202/zP2hPEE6S+D XVkIHM0vOiFtAM1RtDvE22YSI9Dzfa7NBnHlQOXR1f/abdlHyNPxZvTUjSHYTpYz 2Q4BdCFWfZ7mbIAmgDkaMzHh1tUybHkWSmebJdRcajc8T/+s6vawJmxCA9jg6YgG 9oCbXhAMzLddSgougqnpdGl7KcB0Majja2gOKJuKfPS3KwLDn3IIYWnvz2jHq4Qg XHuf3Mq7Ez4sqI3JfKwJZBffEpltj19xAjUxHQotzI8f5umVUstp8b4QAVzjFrkQ 4q+jv2QPOzhMdo20jTOH4M6Wqg== -----END CERTIFICATE-----Generated at Tue Apr 8 03:42:46 2025 by rpki-client